Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
File:                     ce5-1KapEFTmvCSYaT_gwvhiEB0.mft (raw, json)
Hash identifier:          02JbPnf/kmDewsqbpttFdIsaEAT4524NY/gSP+13vkY=
Subject key identifier:   90:52:50:04:1E:63:24:AB:CE:38:19:4B:FD:23:50:C5:74:0F:95:15
Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
Certificate issuer:       /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Certificate serial:       01A00326642828D35C700CC0758062D387F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
Manifest number:          110E
Signing time:             Sat 15 Aug 2026 02:00:42 +0000
Manifest this update:     Sat 15 Aug 2026 02:00:42 +0000
Manifest next update:     Sun 16 Aug 2026 02:00:42 +0000
Files and hashes:         1: _z2uZVdWVofMNDXIfpAr7x8K_Pw.roa (hash: moGqRZrZjmmem4RcH2GHZPdoIwD9Iav/z8dOsylXWfw=)
                          2: ce5-1KapEFTmvCSYaT_gwvhiEB0.crl (hash: bH/ct2z7D0/uM0Fo++Z09vRM8Achve4h3bS7rwa47ik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:26:64:28:28:d3:5c:70:0c:c0:75:80:62:d3:87:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
        Validity
            Not Before: Aug 15 02:00:42 2026 GMT
            Not After : Aug 16 02:00:42 2026 GMT
        Subject: CN=905250041e6324abce38194bfd2350c5740f9515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fd:b6:a1:98:8b:b5:7f:ac:9e:dc:8a:84:87:
                    10:85:56:4c:3c:84:1c:63:ac:ba:40:80:1b:f4:19:
                    17:a3:67:fc:93:c1:f2:5a:83:f9:01:b7:4d:54:ef:
                    e9:68:0a:45:b5:d7:e5:e6:69:54:47:b1:bd:23:84:
                    93:72:d1:0b:cd:6a:70:a8:8d:84:14:8b:f0:60:3f:
                    db:51:f2:ff:75:17:36:f5:4a:18:6a:af:47:de:c4:
                    07:83:4a:62:20:1d:c3:6b:7e:21:a5:bf:08:23:1d:
                    f3:1c:16:4f:c5:cd:a8:82:fc:b9:ee:04:46:ef:96:
                    9d:95:c6:99:57:16:cd:1b:e8:1e:34:ed:43:ad:9f:
                    9c:d2:2e:9f:2e:87:f1:2c:7d:40:92:de:cd:34:a9:
                    6d:61:db:2d:24:21:cf:06:0a:a2:39:b4:3d:09:1f:
                    be:e5:5d:2e:0d:f5:25:ba:81:35:ea:5c:1d:d4:50:
                    50:bf:4e:ff:50:56:d7:85:7c:12:42:55:d7:75:27:
                    71:35:bb:4a:a2:b3:39:49:ba:72:57:2d:f8:de:cf:
                    40:2e:9c:d9:28:a8:d7:ad:16:71:f9:be:30:1d:ae:
                    ed:78:f4:8c:7a:94:ff:1e:9d:15:fd:55:92:14:13:
                    2e:a1:bb:3a:37:4f:f5:55:89:dd:d0:24:75:29:09:
                    2f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:52:50:04:1E:63:24:AB:CE:38:19:4B:FD:23:50:C5:74:0F:95:15
            X509v3 Authority Key Identifier:
                keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:93:a5:91:b4:2a:72:a0:32:eb:c5:86:4a:60:c3:5c:af:2b:
         96:79:d5:ae:da:10:31:5a:c7:fb:75:31:6b:7c:5a:20:06:e2:
         81:08:d0:47:29:7b:b4:82:55:89:ce:3f:63:de:af:ec:f5:b5:
         34:4e:bc:06:fd:ef:fd:9d:87:b2:5d:c3:77:e2:58:2d:5e:a2:
         1d:81:2b:93:ec:d9:69:d6:2e:86:a7:92:2d:8e:f4:4b:40:41:
         44:d1:0c:6e:f4:a1:05:4f:f3:1a:91:f3:3f:d6:51:ba:6f:67:
         23:00:86:53:18:bd:8a:f0:4e:d9:dc:1e:c1:a4:27:4d:02:1e:
         72:94:22:f4:3b:87:32:c8:ba:6e:2a:e6:5e:58:8e:27:ad:fa:
         6a:84:eb:0e:f1:f7:72:ee:65:c3:1b:e2:e3:37:e9:e8:96:43:
         d9:38:42:3a:42:28:7e:c2:9a:63:7e:32:4d:10:fa:d5:2e:6d:
         d3:6a:7b:fd:9f:cb:8b:27:af:bb:62:19:41:c5:ff:76:23:65:
         08:a5:d1:7d:9b:90:42:0e:5e:ca:4d:f3:a6:8a:e4:70:45:95:
         ab:cd:c7:db:94:36:4b:05:25:77:c9:43:60:ca:09:93:62:89:
         16:87:7d:ca:30:0c:41:0b:6a:af:8a:1e:14:4c:a3:2c:92:77:
         57:fe:61:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:15:11 2026 by rpki-client